Privacy Policy

This Privacy Policy (hereinafter "Policy") is published by ang888 (hereinafter "ang888", "we", "us", or "our") and applies to all personal data collected from users (hereinafter "Player", "User", "you", or "your") of the ang888 online casino and sports betting platform accessible at https://ang888.cam, including all associated subdomains, mobile web interfaces, and digital communication channels.

ang888 takes the protection of personal data seriously. This Policy has been drafted to be transparent, readable, and specific — so that Malaysian players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia understand exactly what happens to their data when they use our platform.

By registering an Account and accepting our Terms & Conditions, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. This Policy is incorporated by reference into ang888's Terms & Conditions.

The following definitions apply throughout this Policy:

"Personal Data"

Any information relating to an identified or identifiable natural person — including name, email address, phone number, date of birth, payment details, IP address, device identifiers, and behavioural data — that ang888 collects, stores, or processes in connection with your use of the Platform.

"Data Controller"

ang888, as the entity that determines the purposes and means of processing personal data collected from Players and users of the Platform.

"Data Processor"

Any third-party service provider that processes personal data on behalf of ang888 under a data processing agreement, including payment processors, KYC verification providers, and cloud infrastructure operators.

"Processing"

Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, and destruction, whether by automated or manual means.

"KYC"

Know Your Customer — the regulatory identity verification process requiring Players to provide documentary proof of identity and address before certain account functions (including withdrawals) are enabled.

"Cookies"

Small text files placed on a Player's device by the Platform for the purposes of session management, preference storage, security, and analytics. See Section 10 for full details.

"Data Subject"

Any natural person whose personal data is collected or processed by ang888 — principally, registered Players and visitors to the Platform.

"Sensitive Personal Data"

A special category of personal data requiring heightened protection, including but not limited to identity document numbers, financial account details, and biometric data submitted for KYC verification purposes.

ang888 collects the following categories of personal data, depending on how you interact with the Platform:

ang888 collects personal data through the following means:

• Direct submission: Data you provide when completing the registration form, submitting KYC documentation, making a deposit or withdrawal request, or contacting our support team;
• Automated collection: Technical and behavioural data collected automatically through server logs, session tracking, and platform analytics when you browse or interact with the Platform;
• Cookie and similar technologies: Session cookies, preference cookies, and security tokens set by the Platform on your device — detailed in Section 10;
• Third-party verification providers: Identity and address verification data returned by our KYC service providers following document submission;
• Payment processors: Transaction status, reference numbers, and partial account identifiers returned by payment partners including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect following deposit or withdrawal processing;
• Fraud and security systems: Risk signals and device fingerprinting data generated by our anti-fraud infrastructure to detect suspicious account activity or potential money laundering.

ang888 processes personal data only for specified, legitimate purposes. The table below sets out each processing purpose and the legal basis on which we rely:

Personal data collected by ang888 is processed through a combination of automated systems and manual review workflows. Automated processing is used for: account authentication, real-time fraud scoring, payment processing integrations, responsible gambling monitoring algorithms, and session analytics.

Manual processing by trained ang888 staff is applied to: KYC document review, support ticket resolution, formal complaint handling, withdrawal verification, and compliance investigations. Staff who access personal data do so only on a need-to-know basis and are bound by confidentiality obligations.

ang888 does not use your personal data for automated profiling that produces legal or similarly significant effects without your explicit consent. Behavioural data used for responsible gambling monitoring (such as identifying potential problem gambling patterns) is used only to trigger protective interventions — it is not used for targeted advertising or third-party profiling.

ang888 does not sell, rent, lease, or otherwise commercially transfer personal data to third parties. Personal data is shared with the following categories of third-party recipients only to the extent necessary for the specified purpose:

• Payment processors: DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, and cryptocurrency payment gateways — for the purpose of processing deposits and withdrawals in MYR;
• KYC and identity verification providers: Third-party services that verify the authenticity of Malaysian IC, passport, and address documents submitted by Players during the verification process;
• Fraud prevention and anti-money-laundering service providers: Risk intelligence platforms that analyse transaction patterns and device signals to detect suspicious activity;
• Cloud infrastructure and data hosting providers: Secure cloud service providers that host ang888's platform data under contractual data processing agreements that impose equivalent data protection obligations;
• Regulatory and law enforcement authorities: Government bodies, financial intelligence units, or law enforcement agencies where ang888 is legally compelled to disclose personal data by applicable law, court order, or regulatory direction. ang888 will disclose only the minimum data required by the legal obligation;
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by ang888, subject to professional confidentiality obligations.

ang888's primary data infrastructure is hosted in data centres that maintain high-security standards. Where personal data is transferred to third-party processors or infrastructure providers located outside Malaysia, ang888 ensures that adequate safeguards are in place to protect the data, including contractual data transfer clauses that impose obligations equivalent to applicable data protection standards.

ang888 will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

Players who have questions about international data transfers or wish to obtain information about the specific safeguards in place may contact ang888's support team using the contact details set out in Section 15.

ang888 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, and thereafter only where required by law or legitimate business need. The following retention schedule applies:

• Active Account Data: Retained for the duration of your active Account plus a minimum of 7 years following Account closure, to comply with anti-money-laundering record-keeping requirements;
• KYC Verification Documents: Retained for the duration of Account activity plus 7 years from the date of Account closure or the date of the last transaction, whichever is later;
• Transaction Records (deposits, withdrawals, bets): Retained for 7 years from the date of each transaction for financial compliance and audit purposes;
• Support and Communication Records: Retained for 3 years from the date of the last interaction, unless the record relates to a formal complaint or legal dispute, in which case it is retained until the matter is fully resolved plus an additional 2 years;
• Technical and Analytical Data (IP logs, session data): Retained for 12 months from the date of collection in aggregated or pseudonymised form;
• Marketing Preference Data: Retained until you withdraw consent or request deletion, and for a further 3 years as evidence of the consent record;
• Self-Exclusion Records: Retained for the duration of the exclusion period plus 7 years to prevent re-registration by excluded Players.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised such that it can no longer be attributed to any identifiable individual.

ang888 uses cookies and similar tracking technologies to operate the Platform, maintain your session, protect against fraud, and understand how Players use the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection cookies, and login state cookies. These cannot be disabled without preventing you from using the Platform;
• Functional Cookies: Store your preferences such as language settings, remembered username (if enabled), and display preferences to improve your experience across sessions;
• Security Cookies: Used by our fraud-prevention systems to detect bot activity, credential stuffing attempts, and suspicious session patterns. These are strictly necessary for platform security;
• Analytics Cookies: Collect anonymised or pseudonymised data about how Pages are navigated and which features are used, to help ang888 improve the Platform. No personally identifiable information is included in analytics reports.

ang888 does not use third-party advertising or behavioural targeting cookies. No data collected through ang888's cookies is shared with external advertising networks.

You hold the following rights with respect to your personal data held by ang888. To exercise any of these rights, contact our support team using the details in Section 15. ang888 will respond to all verified data subject requests within 30 calendar days of receipt.

ang888 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. The Platform is not intended for, directed at, or marketed to any person under 21 years of age.

Age verification is a mandatory step in the KYC process. Where ang888 identifies or reasonably suspects that a registered Account belongs to a person under 21 years of age, the Account will be suspended immediately pending investigation. Any real-money activity conducted on an underage Account will be subject to review, and ang888 will not be liable for any losses or costs arising from underage registration.

If a parent or guardian believes that a person under 21 has registered an Account at ang888, they are requested to contact our support team immediately. ang888 will take prompt action to investigate and, where confirmed, to close the Account and return any deposited funds after necessary review.

ang888 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between your browser and ang888's servers is protected by TLS 1.2 or higher. ang888 enforces HTTPS across all pages of the Platform;
• Encryption at Rest: Sensitive personal data, including KYC documents and financial transaction records, is encrypted at rest using AES-256 encryption;
• Access Controls: Internal access to personal data is restricted to authorised staff on a strict need-to-know basis. All internal access is logged and audited;
• Two-Factor Authentication: Two-factor authentication (2FA) is available and encouraged for all Player Accounts. Internal staff access to systems containing personal data requires mandatory 2FA;
• Vulnerability Management: ang888 conducts regular security assessments, penetration testing, and code reviews of the Platform infrastructure;
• Incident Response: ang888 maintains a documented data breach response procedure. In the event of a data breach that is likely to result in a risk to Players' rights and freedoms, ang888 will notify affected Players without undue delay.

ang888 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify you via your registered email address and/or through a prominent notice on the Platform, no less than 14 calendar days before the amended Policy takes effect.

The "Last Reviewed" date at the top of this document reflects the date of the most recent update. Minor clarifications or corrections that do not materially affect your rights may be updated without specific notification, and the revised date will be updated accordingly.

Your continued use of the ang888 Platform following the effective date of any Policy amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with any amendment, you may exercise your right to Account closure before the amended Policy takes effect.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact ang888's support team through the following channels: